Keep Microsoft Authenticator for required Microsoft sign-ins and consider Begamob for separate personal TOTP codes. Microsoft-specific approvals, passwordless access, and supported passkeys…